Lead Engineer – Cloud & Endpoint

Dyson; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Dyson is seeking a Cloud & Endpoint Security Engineer to design and operate integrated cloud-connected and endpoint protection across workspace platforms. You will bridge cloud security services with endpoint telemetry, managing Defender vulnerability management, Defender for Cloud Apps, and automated security posture controls.

In this cross-domain role, you will lead architecture, telemetry pipelines, and governance, delivering measurable improvements in security posture and exposure

Qualifications

• Bachelor's degree or equivalent practical experience in a technical field.
• 5–7 years of cybersecurity experience focusing on cloud-delivered endpoint protection, CASB, and exposure management.
• Hands-on experience deploying Defender stacks across cloud and hybrid estates.
• Industry certifications such as SC-400, SC-200, CISSP or CCSP are highly desirable.

Responsibilities

• Defender for Endpoint & Cloud Integration: Own the architecture and operational health of MDE cloud capabilities.
• Vulnerability & Exposure Management: Implement and optimize Defender Vulnerability Management for exposure reduction.
• Cloud App Security (CASB): Engineer and govern Defender for Cloud Apps to secure SaaS usage.
• Security Posture Management: Build posture monitoring tools, reporting frameworks, and automated remediation.
• Telemetry & Engineering Projects: Lead security engineering projects and telemetry integration into central monitoring.
• Leadership & Execution: Lead complex engineering projects and translate security outcomes into actionable steps.
• Continuous Improvement & Automation: Automate security checks, ticketing workflows, and policy adjustments.

Skills

Cloud endpoint protection

CASB

Vulnerability management

Defender for Endpoint

Defender for Cloud Apps

API integrations

KQL

Threat intelligence

Security telemetry

Security automation

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

Microsoft Defender for Endpoint

Defender Vulnerability Management

Defender for Cloud Apps

Microsoft Sentinel

Security Posture Management tools

Job description

Role Purpose

As the Cloud & Endpoint Security Engineer, you are accountable for engineering integrated cloud-connected and endpoint security capabilities to maintain a high security posture across all workspace platforms.

Operating as a cross-domain engineering lead, you will bridge the gap between cloud security services and endpoint telemetry. By managing Defender Vulnerability Management, maintaining Defender for Cloud Apps integrations, and implementing automated security posture controls, you will provide visibility and technical remediation across the workplace ecosystem.

In this role, you will lead and manage the following domains:

Defender for Endpoint & Cloud Integration: Owning the architecture and operational health of MDE cloud capabilities.

Vulnerability & Exposure Management: Implementing and optimizing Defender Vulnerability Management to continuously identify exposure.

Cloud App Security (CASB): Engineering and governing Defender for Cloud Apps to secure SaaS usage and shadow IT.

Security Posture Management: Building posture monitoring tools, compliance reporting frameworks, and automated posture remediation.

Telemetry & Engineering Projects: Leading workplace security engineering projects and providing telemetry integration into central monitoring solutions.

Key Skills & Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline (or equivalent practical experience).

• A minimum of 5–7 years’ cybersecurity experience with focus on cloud-delivered endpoint protection, CASB, and exposure management platforms.

• Proven hands‑on experience deploying and running unified Microsoft Defender security stacks across cloud and hybrid client estates.

• Relevant industry certifications such as Microsoft Certified: Information Protection and Governance Administrator Associate (SC-400), SC-200, CISSP, or CCSP are highly desirable.

Security Expertise & Architecture

Deep technical expertise in cloud-delivered security solutions, exposure management, CASB architecture, API integrations, and threat vector analysis across hybrid workspaces.

Tooling & Technical Proficiency

Expertise with Microsoft Defender for Endpoint (MDE), Defender Vulnerability Management, Defender for Cloud Apps (MDA), Microsoft Sentinel integration, and Security Posture Management tools.

Risk Management & Prioritisation

Ability to leverage vulnerability scoring models (CVSS, EPSS) and asset business context to prioritize exposure remediation across cloud and endpoint boundaries.

Governance, Process & Control Design

Experience designing cloud access policies, sanctioning SaaS applications, and establishing vulnerability management exception tracking mechanisms.

Service Delivery & Operational Management

Track record of managing enterprise‑scale security tooling platforms, maintaining seamless API connections, and delivering against operational SLAs.

Data Analysis, Reporting & Insight

Strong data‑analysis skills using KQL and API data feeds to create executive dashboards demonstrating security posture improvements and risk trends.

Stakeholder Management & Influence

Effective communicator capable of collaborating with cloud operations, networking, and IT operations teams to implement security posture changes.

Threat Intelligence Integration

Ability to utilize threat intelligence indicators to identify malicious SaaS application usage, unusual tenant activities, and high‑risk endpoint vulnerabilities.

Leadership & Execution

Proven execution capability to lead complex engineering projects, translate security outcomes into practical steps, and guide operational teams.

Continuous Improvement & Automation

A drive to automate security checks, vulnerability ticketing workflows (e.g., via ITSM integrations), and cloud app policy adjustments.

Key Accountabilities & Success Measures

Vulnerability & Posture Management Engineering
Accountability: Deploy, operate, and optimize Defender Vulnerability Management to identify, prioritize, and drive technical exposure reduction.
Success Measures: Maintain >95% accurate scan and telemetry coverage across all active cloud‑managed devices; Measurable structural reduction in organizational Exposure Score within Defender Vulnerability Management.

Cloud App Security & Shadow IT Governance

Accountability: Architect and manage Defender for Cloud Apps integrations to enforce SaaS governance, detect anomalous cloud behavior, and control unsanctioned applications.
Success Measures: 100% of cloud app traffic monitored and evaluated against security risk policies; Automated block controls enforced for high‑risk, unsanctioned cloud platforms.

Security Telemetry & Platform Automation

Accountability: Drive end‑to‑end security telemetry pipelines between MDE, Cloud Apps, and centralized monitoring tools (e.g., Sentinel/ServiceNow).
Success Measures: 100% platform uptime and event ingestion reliability across security tool integrations; Significant reduction in manual tracking through automated posture and vulnerability ticketing workflows.

Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity.